Oświadczenie o ochronie danych

Our websites and the possibility of sending an anonymous message (a text message, an e-mail or a letter) or replying to one (hereinafter referred to as our 'Service') are provided by Mocha B.V. (hereinafter referred to as Mocha and 'We'), registered at Eindhoven, Netherlands, and registered in the Dutch Chamber of Commerce with registration number 84830832.

If you have any privacy-related questions, please contact us using the contact form.

1. Why this privacy policy?

Mocha feels strongly about protecting your privacy and personal data. Your personal data is therefore treated and safeguarded with the utmost care. We only use and process your personal data in compliance with the relevant legal requirements, including the General Data Protection Regulation (GDPR).

This privacy policy applies to our website visitors, users of our Service, and persons who received an anonymous message. This Privacy Policy is intended to inform you about the processing of your personal data and about your rights.

This Privacy Policy may be updated in the future. We reserve the right to make changes to this Privacy Policy at any time. Major changes will always be announced. We recommend checking this document regularly.

2. Who processes your personal data?

We process your personal data to offer you our Service.

When you make a payment, your payment details are collected and processed directly by our payment service provider, Stripe or Mollie, depending on the payment method you choose. Furthermore, we share your personal data with government organizations if legally required. We require that processors ensure the safety and confidentiality of the data. Processors must comply with our instructions and only process the necessary information. We never sell your data to our processors or other third parties.

Third-party services

We use the following third-party services to provide our Service. Depending on how you use the Service, these services may process your payment details, contact details, IP address and technical data needed to operate the Service. We limit the data each third-party service receives to only what is necessary for it to function.

In addition to the services listed above, we use specialised delivery partners (SMS gateways for text messages, e-mail delivery providers for e-mails and postal partners for letters) and a web hosting provider. For security and confidentiality reasons, we do not name these providers publicly. The delivery partners process the message content, the recipient's contact details and the technical data needed to deliver your message; our hosting provider stores the data described in this privacy policy. All of them act only on our instructions and may not use your data for their own purposes.

3. On what basis is your personal data processed?

In compliance with privacy regulations, we process your personal data based on one or more of the following legal basis:

  • Fulfilment of an agreement with you;
  • Compliance with legal or regulatory requirements regarding the management of a contractual relationship, particularly with regard to providing the Service;
  • The legitimate interest of us or the user of the Service.
  • Your explicit consent.

4. What kind of personal data is processed?

We only process and collect personal data that is necessary for the purposes for which it is processed:

Website visitor or user of our Service:

  • The contact information you provide;
  • The content of your message (including any attachments);
  • Information about the delivery of your message;
  • Payment information (a payment reference, the payment method used and the name and e-mail address linked to the payment);
  • Your IP address;

Receiver of the anonymous message:

  • The contact details needed to deliver the message;
  • Any personal data contained in the message.

If you send a message and fill in the information required to do so, you are providing personal information to us. This lets you control the information provided to a certain extent.

5. Goal of the processing

We collect personal data on you as a user of our Service in order to offer a safe, optimal, and personal user experience. Data processing is essential for the functioning of our websites and corresponding services. Data processing only takes place for the following specific purposes:

  • To provide the Service;
  • Protection from fraud and violations;
  • Processing of payments;
  • To contact our company.

This personal data is primarily processed for internal use. We have taken the necessary legal and technical precautions to prevent unauthorized access and use. If the collected data turns out to be incomplete or apparently incorrect, we reserve the right to temporarily suspend or discontinue certain expected actions if information is lacking, incorrect or incomplete.

The personal data that we collect will be retained for no more than eighteen (18) months. Payment transaction records are held by our payment processors (Stripe and Mollie), which retain them for as long as they are legally required to.

6. Cookies

We use functional and analytical cookies. Functional cookies are necessary for the proper functioning of our websites, for example to remember your order while you complete it. For analytics we use Google Analytics with IP anonymization enabled, which gives us insight into how our websites are used in aggregate; Google's privacy policy is linked in the list of third-party services above.

7. Your rights

When we process your personal information, you are protected by a number of rights. You have the right to:

  • Request access to your personal data;
  • Request adjustment or rectification;
  • Request deletion of your personal data;
  • Request that the data processing is (temporarily) restricted;
  • Request to transfer your data (if technically possible).

Please note that we cannot or do not always have to comply with the requests mentioned above. For example, certain personal data can’t be deleted due to legal obligations. It may also be the case that we are of the opinion that certain processing cannot be restricted.

The abovementioned requests can be submitted by using our contact form. We will comply with your request within one month.

If you have a complaint about the manner in which your personal data is processed, we would like to hear from you so that we can find a solution together. If that doesn’t satisfy you, you can submit your complaint to the Data Protection Authority at www.autoriteitpersoonsgegevens.nl.

Last modified on 9th of August 2026.